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Abstract. We show that one can find two nonisomorphic curves over a field 
K that become isomorphic to one another over two finite extensions of K 
whose degrees over K are coprime to one another. 

More specifically, let Kq be an arbitrary prime field and let r > 1 and s > 1 
be integers that are coprime to one another. We show that one can find a finite 
extension K of Kq, a degree-r extension L of K, a, degree-s extension M of K, 
and two curves C and D over K such that C and D become isomorphic to one 
another over L and over M, but not over any proper subextensions of L/K 
or M/K. 

We show that such C and D can never have genus 0, and that if K is finite, 
C and D can have genus 1 if and only if {r, s} = {2, 3} and K is an odd-degree 
extension of F3. On the other hand, when {r, s} = {2, 3} we show that genus-2 
examples occur in every characteristic other than 3. 

Our detailed analysis of the case {r, s} = {2, 3} shows that over every finite 
field K there exist nonisomorphic curves C and D that become isomorphic to 
one another over the quadratic and cubic extensions of K. 

Most of our proofs rely on Galois cohomology. Without using Galois co- 
homology, we show that two nonisomorphic genus-0 curves over an arbitrary 
field remain nonisomorphic over every odd-degree extension of the base field. 



1. Introduction 

Suppose C is a curve over a field K, and suppose L is an extension field of K. An 
L-twist of C is a curve D over K that becomes isomorphic to C when the base field 
is extended to L, and a twist of C is a curve D over K that becomes isomorphic 
to C over some field extension. The simplest version of the question we address in 
this paper is the following: 

Question 1.1. Suppose C is a curve over a field K, and suppose L and M are 
finite extensions of K whose degrees over K are coprime to one another. If D is a 
curve over K that is simultaneously an L-twist of C and an M -twist of C , must D 
he isomorphic to C over K7 

There are a number of published papers that consider a generalization of Ques- 
tion 11.11 (see the discussion in , but we have not found any papers specifically 
addressing Question 1 1 . 1 1 itself. We will show that the answer to the question is 'no'. 

We actually answer a more refined question. Suppose D is a twist of C. We say 
that an extension L oi K is a minimal isomorphism extension for C and D if C and 
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D become isomorphic to one another over L but not over any proper subextension 
oiL/K. 

Question 1.2. Suppose r > 1 and s > 1 are integers that are coprime to one 
another. Does there exist a curve C over a field K , a twist D of C , and a pair of 
extensions L and M of K of degrees r and s, respectively, such that L and M are 
both minimal isomorphism extensions for C and D7 

The answer to Question 11.21 is 'yes', as the following theorem shows. 

Theorem 1.3. Let Kq be a prime field and let r > 1 and s > 1 be integers 
whose greatest common divisor is 1. Then there exist curves C and D over a 
finite extension K of Kq that are twists of one another and that have minimal 
isomorphism extensions of degrees r and s over K . 

In Section [3] we provide two proofs of this theorem for the special case where 
Kq is finite. The second proof shows that we may take K to be any even-degree 
extension of K^. We can also write down very explicit examples of such curves 
C and D in many special cases. In particular, when = Q we can write down 
explicit examples for every r and s, thus completing the proof of Theorem 11.31 We 
note that when r and s are both prime, we can write down explicit examples over 
fields of every characteristic. 

We also show that over finite fields, curves satisfying the conclusion of Theo- 
rem [T|3] must have large geometric automorphism groups. 

Theorem 1.4. Let Kq, r, s, C, and D be as in Theorem II. 3^ and suppose that Kq 
is finite. Then the geometric automorphism group of C [and of D) contains a finite 
subgroup of order divisible by rs, but not equal to rs. Furthermore, if rs = 2 mod 4 
then this automorphism group contains a finite subgroup whose order is divisible 
by 2rs. 

We actually prove a slightly stronger statement; see Theorem 18. II 
In addition, we take a closer look at the possibilities when C and D have small 
genus. When Kq is finite, the curves that occur in Theorem 11.31 can never have 
genus 0, because over a finite field all twists of a genus-0 curve are trivial. But even 
over an arbitrary field, genus-0 examples do not exist. 

Theorem 1.5. Suppose C and D are curves of genus over a field K that become 
isomorphic to one another over an odd-degree extension of K . Then C = D. 

(Note that this theorem would be false without the restriction to odd-degree 
extensions; the genus-0 curve x"^ + y'^ — ~1 over M is a nontrivial quadratic twist 
of the projective line over R.) 

Corollary 1.6. For every r and s, the answer to Question 11.21 is 'no' if the curve 
C is required to have genus 0. 

We also show that over finite fields examples of genus- 1 curves as in Theorem ll.3l 
occur only in a very special case. 

Theorem 1.7. Suppose that C and D are nonisomorphic curves of genus 1 over a 
finite field K such that C and D have minimal isomorphism extensions of degrees 
r and s, where r and s are coprime to one another. Then {r, s} = {2, 3}, the field 
K is an odd-degree extension of ¥3, and C and D have supersingular Jacobians. 
Conversely, for every odd-degree extension K of F3 there are genus-1 curves C and 
D over K that have minimal isomorphism extensions of degrees 2 and 3. 
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On the other hand, when {r, s} ~ {2, 3} we can get genus-2 examples over every 
finite field whose characteristic is not 3. 

Theorem 1.8. If K is a finite field of characteristic not 3, then there exist genus- 
2 curves C and D over K that have minimal isomorphism extensions of degrees 2 
and 3. If K is a finite field of characteristic 3, then no such curves exist over K. 

Combining Theorems 11.71 and 11.81 and the second proof of Theorem [T3] for finite 
fields, we obtain an interesting corollary: 

Corollary 1.9. Over every finite field K , there exist nonisomorphic curves C and 
D that become isomorphic to one another over the quadratic and cubic extensions 
ofK. 

When is finite and {r, s} ^ {2,3}, examples of genus-2 cm-ves as in Theo- 
rem 11.31 are very special. 

Theorem 1.10. Let r > 1 and s > 1 be coprime integers with {r, s} ^ {2,3}. 

Suppose that C and D are nonisomorphic curves of genus 2 over a finite field K 
such that C and D have minimal isomorphism extensions of degrees r and s. Then 
{r, s} = {2, 5}, the field K is an odd-degree extension of F5, and there is an element 
a of K whose trace to F5 is nonzero such that C and D are isomorphic to the curves 

= — X + a and 

= x^ — X + 2a, 

respectively. Conversely, if K is an odd-degree extension of F5 and a € K has 
nonzero absolute trace, then the two curves given above have minimal isomorphism 
extensions of degrees 2 and 5 over K . 

Our results lead naturally to a number of related questions. 

Question 1.11. Given coprime integers r > 1 and s > 1, is there an upper bound 
on the size of a set of curves {Ci\ over a field K such that each pair of curves 
{Ci, Cj) with i ^ j has minimal isomorphism extensions of degrees r and s? 

Question 1.12. Given a finite set {r^} of integers greater than 1, no one of which 
divides any of the others, do there exist curves C and D over a field K that have 
minimal isomorphism extensions of degree ri for each i? 

Our methods can be used to show that the answer to Question 11.111 is no and 
the answer to Ouestion ll.l2l is yes; furthermore, the answers remain the same even 
if the field K is required to be a finite field of a given positive characteristic. As we 
will see, questions of this sort are related to the following natural question: 

Question 1.13. Given a finite field K, a finite group G, and an automorphism 
Lp of G, does there exists a curve C over K whose geometric automorphism group 
is isomorphic to G, with the isomorphism taking the action of Frobenius on the 
automorphism group to ip7 

This question is related to a result of Madden and Valentin! [T3] , who show that 
for every finite group G and every field K, there is a curve over the algebraic closure 
of K whose automorphism group is isomorphic to G. 

For finite fields K, specifying a finite extension L of K (up to isomorphism) is 
equivalent to specifying the degree of L over K. For arbitrary fields this is of course 
no longer the case. This leads us to our final open question: 
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Question 1.14. Given two linearly disjoint finite extension fields L and M of 
a field K , do there exist curves C and D over K having L and M as minimal 
isomorphism extensions! 

In Section[2]we give some baclcground information on nonabelian Galois cohomol- 
ogy and twists of curves. In Section [3] we show how Theorem 11.31 can be proven for 
finite fields if we can provide examples of curves with certain automorphism groups; 
we then complete the proof of Theorem 11.31 for finite fields by constructing — in 
two different ways — curves with the right kind of automorphism group. In Sec- 
tion m we provide several explicit constructions of curves satisfying the conclusion 
of Theorem 11.31 for many different values of r and s; in particular, these examples 
give a complete proof of the theorem in the case Kq = Q. In Section [5] we give 
a cohomology-free proof of Theorem 11.51 In Section [6] we prove some results from 
group theory that we require in the sections that follow. We prove Theorem 11.71 
in Section [7] and Theorem 11.41 in Section [S] In Section [5] we prove Theorems 11.81 
and ll.lOl In fact, we prove a stronger version of Theorem 11.81 that gives more in- 
formation about the automorphism groups of the genus-2 examples. In Section [TOl 
we close the paper with a discussion of questions related to our results. 

Conventions. In this paper, by a curve over afield K we always mean a connected 
complete geometrically nonsingular one-dimensional scheme over Spec K. It follows 
by definition that all morphisms of curves over K are themselves defined over K . 
When we present a curve via explicit equations, we mean the normalization of 
the projective closure of the possibly-singular variety defined by those equations. 
If C is a curve over K and if L is an extension field of then the fiber product 
C X Spec K Spec L is a curve over L that we denote Cl ■ We can restate our definition 
of a twist of a curve using this notation: If C is a curve over a field K and if L is an 
extension field of K , then an L-twist of C is a curve D over K such that Dl = Cl- 
We denote the algebraic closure of a field K hy K . The geometric automorphism 
group of a curve C over a field K is the group Aut Cj^. 

A proper divisor of a positive integer n is a positive divisor of n that is strictly 
less than n. A proper subextension of a field extension L/K is a subfield of L that 
contains K, but that is not equal to L itself. 

Acknowledgments. The authors are grateful to Brad Brock, George Glauberman, 
Miuray Schacher, and Joseph Wetherell for helpful discussions. 

2. Twists and cohomology 

In this section we review the relationship between twists of curves and Galois co- 
homology. To simplify the exposition, we limit our discussion to the case of curves 
over finite fields. Our source for the material in this section is Serre's book [l9] . 
Nonabelian cohomology is discussed in [121 §1-5], and the cohomological interpre- 
tation of twists is given in §111.1]. 

Let K be a finite field, let X be a curve over K, and let G = Aut Xj^. We begin 
by defining the pointed cohomology set H^{Ga.\K/K, G). 

We view G as a topological group by giving it the discrete topology, and we give 
the Galois group GalK/K the profinite topology. A cocycle is a continuous map 
a i—f from GalK/K to G that satisfies the cocycle condition for all 

(T, T in Gb\K /K . Since the absolute Galois group of a finite field is freely generated 
as a profinite group by the Frobenius automorphism a cocycle is completely 
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determined by where it sends (p. Furthermore, for every g (z G there is a cocycle 
that sends tp to g. 

Two cocycles a i-^ a„ and a are cohomologous if there is an element c of G 

such that ba- — c^^aad' for all a € GalK /K. This defines an equivalence relation 
on the cocycles, and the set of equivalence classes is denoted {G&\ K / K , G). We 
give {G&X K / K , G) the structure of a pointed set by distinguishing the class of 
the cocycle that sends all of G&\K /K to the identity of G. 

Let Tw(X) be the set of i^-isomorphism classes of iiT-twists of X. We give 
Tw(X) the structure of a pointed set by distinguishing the isomorphism class of X 
itself. As is shown in [191 §111-1] j there is a bijection (3 between the pointed sets 
Tw(X) and H^{GalK/K,G), defined as follows: 

Suppose C is an .fC-twist of X, and let / be an isomorphism from Xj^ to Gj^. Let 

be the isomorphism X-^ Cj^ obtained from / by replacing every coefficient in 
the equations defining / with its image under the Frobenius automorphism oi K/K; 
this gives us an isomorphism from Xj^ to Gj^ because X and G are defined over K. 
We define /3{C) to be the cohomology class of the cocycle that sends the Frobenius 
(f e GalK/K to the automorphism of ^■ 

Suppose L is a finite extension of K. Then there is a natural map from Tw{X) 
to Tw{Xl), defined by sending the class of an iiT-twist C of X to the class of the 
ii'- twist Gl oi Xl- This map is also easy to describe in terms of cohomology sets: 
A cocycle representing a class of H^{Ga.\K /K,G) is a map c : Ga\K/K G 
that satisfies the cocycle condition, and we can define a map H^{GalK/K,G) 
H^{Ga,lK/L, G) by sending the class of a cocycle c to the class of AoaiK/L' '"^'^ 
also easily describe this map in terms of Frobenius elements. If ipK and ipL are the 
Frobenius automorphisms of K/K and K /L, respectively, then ipL — where 
n — [L : K]. If a cocycle of H^{Ga\K /K, G) sends (pK to g, then the corresponding 
cocycle of H^{GalK/L, G) sends LpL to gg'^'< ■ ■ ■ g'f^<'\ 

A special case of this fact is important enough for our argument that we state 
it as a lemma. 

Lemma 2.1. Let notation be as in the discussion above. Suppose GalK/K acts 
trivially on G = KntXj^. Then H^{Ga\K/K,G) is isomorphic {as a pointed set) 
to the set of conjugacy classes of G. If G is a K-twist of X corresponding to 
the conjugacy class of g Cz G, then Gl is the K-twist of Xl corresponding to the 
conjugacy class of g^ € G. 

Proof. If Ga\K/K acts trivially on G (that is, if all of the geometric automor- 
phisms of X are defined over K), then the equivalence relation for two cocycles 
being cohomologous degenerates into the equivalence relation of conjugacy in G, so 
H^{GalK/K, G) is the set of conjugacy classes of G. 

Suppose C is a twist of X corresponding to the cocycle that sends (fK to g. We 
have already noted that the cocycle representing the class of the twist Gl of Xl 
is the cocycle that sends ipL to gg'^'^ ■ ■ ■ g'^^ . Since acts trivially on G, this 
element is simply □ 

We close by noting that the relationship between twists of curves and cohomology 
groups gives us a nice result about the automorphism groups of twists of a given 
curve. We state the result both for curves and for pointed curves, that is, curves 
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with a marked point. Note that an eUiptic curve is a pointed curve if we take the 
origin to be the marked point. 

Lemma 2.2. Let X be a curve {or a pointed curve) over a finite field K , and 
suppose the geometric automorphism group of X is finite. Then 

1 



E 



, ^ #AutC 



1. 



Proof. For curves, this result appears as |5j Prop. 5.1] and [131 Lem. 10.7.5]; for 
elhptic curves, it is [TUl Prop. 2.1]. We merely sketch the proof here. Let G be the 
geometric automorphism group of X and let Lp be the Frobenius automorphism of 
K over K. We can define a (right) action of G on itself by letting an automorphism 
a act on G by a I— > a^^aa'^ . The orbits of this action correspond to the elements 
of H'^{Ga\K / K,G), and hence to the twists of X. Furthermore, if a twist C 
corresponds to the cocycle that sends (/s to a e G, then the automorphism group 
of C is isomorphic to the stabilizer of a under the action of G on itself that we 
just defined. For each orbit O of this action, let us choose a representative element 
ao G O. Clearly for each O we have {^0){jj^Stahao) = 4t^G, and we also clearly 
have 

" #0 = #G. 



orbits O 



Dividing this last equality by #G gives 

^ #AutG ^ ^ # Stab ao ^ ^' 

CeTw(X) " orbits O " ^ 



□ 



Remark. The absolute Galois group of a finite field is isomorphic to Z, the profinite 
completion of the integers; this is the critical fact that makes the discussion of twists 
of curves over finite fields simpler than for curves over arbitrary fields. We cannot 
resist observing that the field K = C{{T)) of Laurent series over the complex 
numbers also has Z for its Galois group — this follows from Puiseux's theorem, 
which identifies iT with U„>iC((ri/")). Thus, many of the arguments and examples 
that we present below could easily be modified to work over C((T)) as well. 

3. Two PROOFS OF Theorem 11.31 for finite fields 



In this section we provide two proofs of Theorem 11.31 in the case where Kq is a 
finite prime field ¥p. Both proofs are based on the same basic strategy: Given a 
prime p and two coprime integers r > 1 and s > 1, we will find a power q oi p and 
a curve X over K = ¥q such that 

• the absolute Galois group GalK/K of K acts trivially on the geometric 
automorphism group G oi X, and 

• the group G contains two elements x and y such that and are conjugate 
to one another, and and are conjugate to one another, but if i is a 
proper divisor of r or of s, then x* is not conjugate to y*. 

(Theorem 16.61 below, shows that the order of such a group G must be divisible 
by rs and greater than rs, and if rs = 2 mod 4 then the order of G must be at 
least 4rs.) Then we take G and D to be the iiT- twists of X corresponding to x 
and y, respectively. Lemma 12.11 shows that the degree-r extension of K and the 
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degree-s extension of K are both minimal isomorphism extensions for C and D. 
The two proofs differ from one another in the choice of the curve X . 

We choose to look for curves X where GalK/K acts trivially on G purely for 
convenience; in this case the condition that two cocycles give rise to twists of X 
that have minimal isomorphism extensions of degrees r and s turns into the easily- 
stated conjugacy condition given above. In Section [9] we will analyze a number of 
examples in which the Galois group does not act trivially. 

First proof of Theorem for finite fields. Let Kq = Fp, r, and s be given, and 
interchange r and s, if necessary, so that r is odd. Let D^rs denote the dihedral 
group of order 4rs, and let u and v be elements of D/^^s satisfying v?^'^ = = 1 and 
vuv ~ u"^ . Note that is conjugate to in D^rs if and only if j = ±j mod 2rs. 

Let m be an integer that is congruent to 1 modulo r and congruent to —1 modulo 
2s, let y — u™, and let x — u. Suppose i is an integer such that is conjugate to 
y*. Then either i = im mod 2rs or i = —im mod 2rs. The first possibility occurs 
precisely when s divides i, and the second when r divides i. 

A result of Madden and Valentini [14] says that every finite group occurs as the 
automorphism group of a curve over ¥p. Thus, there is a curve X over Fp whose 
automorphism group is isomorphic to D^rs- The curve X may be defined over some 
finite field K dWp, and by replacing i^T by a finite extension, we may assume that 
all of the geometric automorphisms of X are defined over K. 

Proceeding as in the outline presented earlier, we find that there are twists C and 
D oi X that have minimal isomorphism extensions of degrees r and s over K. □ 

This first proof is straightforward, but says nothing about the genus or field 
of definition of the examples. The next proof shows that we can find examples 
over Fp2 . 

Second proof of Theorem 11.31 for finite fields. Let Kq — Fp, r, and s be given, and 
interchange r and s, if necessary, so that r is odd. Let n be a positive integer that 
is coprime to p, that is divisible by at least two odd primes, and that has at least 
one prime divisor that is congruent to 1 modulo 2rs. Let q be an even power of p, 
let t be the positive square root of g, and fix a primitive n-th root of unity ^ G F,. 
Let X be the modular curve over ii' = Fg with the following property: for every 
finite extension M = F^e of isT, the noncuspidal M-rational points of X parametrize 
triples (i?, P, Q), where E is an elliptic curve over M such that the Fgc-Frobenius 
acts on E\n\ as multiplication by t*^, and where P and Q are Fg-rational points of 
order n on E such that the Weil pairing of P and Q is (. (Thus X is an F^-rational 
version of the usual modular curve X{n), constructed in much the same way as 
the Igusa-Ihara modular curve is constructed — see [E].) Let G = Aut Xf and 
let Go — AutX. From the modular interpretation of X it is easy to see that Go 
contains a group isomorphic to SL2(Z/nZ)/(±l). But the main result of [7j implies 
that G = SL2(Z/nZ)/(±l), so G is equal to Go- Therefore the Galois group of 
K/K acts trivially on G. 

Let fi be an element of (Z/tiZ)* of order 2rs such that /i'"'* ^ —1. (The conditions 
on n imply that such a /x exists.) Let u be the matrix (g ^^^) in SL2(Z/nZ), and let 
V be the matrix J). It is easy to see that the subgroup of G = SL2(Z/nZ)/(±l) 
generated by the images of u and v is isomorphic to the dihedral group D4rs . 
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Let 771 be an integer that is congruent to 1 modulo r and congruent to — 1 modulo 
2s, and let x and y be the images of u and u™ in G. A straightforward computation 
shows that if d is a proper divisor of r or of s, then u"^ and u™"^ have distinct sets 
of eigenvalues, even up to sign, so x'^ and y'^ are not conjugate to one another in G. 
But x^ and y'" (and and y*) are conjugate to one another in D^^rs, whence also 
in G. 

As before, if we let C and D be the L/if- twists of X given by the elements x 
and y of G, then G and D satisfy the conclusion of Theorem 11.31 □ 

The preceding proof gives examples over the quadratic extension of Kq, but with 
genus greater than (2rs)^. In the following section, we will show that when p does 
not divide rs we can construct explicit examples (over possibly large extensions of 
Kq) of genus rs — 1. 

4. Explicit examples, and the proof of Theorem 11.31 over Q 

In this section we provide explicit examples of curves satisfying the conclusion of 
Theorem ll.3l for certain values r and s and for certain prime fields Kf). In particular. 
Constructions WA\ and 14.31 give explicit curves for the case in which the characteristic 
p of Kq does not divide rs (and therefore provide a proof of Theorem 11.31 for the 
case if = Q) , and Construction 14.41 gives a construction for the case in which 
r = p > Q and s is prime. 

Construction 4.1. Let Kq be a prime field whose characteristic p is not 2. Let 

r > 1 and s > 1 be integers that are coprime to one another, that are not divisible 
by p, and with r odd. Let K be a finite extension of Kq that contains the Ars-th 
roots of unity and let a € K* be an element whose image in X* / K*'^'^'^ has order 
2rs. Using the Chinese Remainder Theorem, choose integers i and j as follows: If 
s is odd, let i and j satisfy 

i = 1 mod r j = — 1 mod r 

7 = s + 1 mod 2s j = s + 1 mod 2s, 

while if s is even, let i and j satisfy 

1 = 1 mod r J = — 1 mod r 

7 = 1 mod 2s j = 1 mod 2s. 

Let C and D be the curves over K defined by 

C: = vP-''' + a' 
D: v^ = u^''' + a^. 

Then C and D are twists of one another, and they have minimal isomorphism 
extensions of degrees r and s over K . 

Proof. Note that whatever the parity of s, we always have 

(j — 7, 2rs) = 2s and {j + 7, 2rs) = 2r, 

and sj is always even. Also, —1 is a 2rs-th power in K* . Let E be the Kummer 
extension K{a^/'^^^) of K, let e be an element of E with e^''* = a, let L = K{e^'^), 
and let M = K{e'^^), so that L and M are extensions of K of degrees r and s, 
respectively. We start by showing that G and D become isomorphic to one another 
over L and over M. 
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Let cl = e^^ £ L, so that e£ = a. Set c — ^^Z^^") and d — . Then m = czz;, 
V = dz gives an isomorphism from Cl to D^. 

Let eA/ = e^'' G M, so that e%f = a. Set c = e^/^^^^^^''^ and d = e^/'^ . Then 
M = c/w, V — dz/w^^ gives an isomorphism from Cm to Da/. 

Now let iV be a finite extension of K that is a proper subextension of either L 
or M; we must show that Cn and Diq are not isomorphic to one another. Suppose, 
to obtain a contradiction, that there is an isomorphism Lp from Cn to Dat. Then tp 
induces an isomorphism ^ from to f\i that takes the roots of the polynomial 
/ = x^^^ + a* G N[x\ to the roots of 5 = x^'^'' + . Kummer theory shows that if 
d is the degree of N over ivT, then the polynomial / splits into irreducible factors 
of degree rs/d (if i is even) or 2rs/d (if i is odd). In either case, these irreducible 
factors have degree at least 6. Lemma W?^ below shows that ^ must be of the form 
u = cw ov u = c/w for some c € N* . Thus our hypothetical map (p from C to Z? is 
either of the form 

u — cw V — dz for some c,d ^ N 

or of the form 

u — c/w V = dz/w^^ for some c^ddN. 

If (p has the former shape, we find that we must have both d^ — c^^'' and 
d^a* = a-', so that a^~* = c^^'' . Now, j ~i — 2st for some t coprime to r, so we find 
that a* = (c^ for some ( ^ K with = 1. Since K contains the 2rs-th roots of 
unity, there is a ^ e iiT with C, = ^ ■ Thus, the element of N satisfies {£,cY = a*. 
Now, since the image of a in f{*/K*'^'^^ has order 2rs, the image of a in K*/K*^ 
has order r, as does the image of a'. By Kummer theory, the degree of K(£^c) over 
K is r, so the degree of N over if is divisible by r, a contradiction. 

If (p is of the form u = c/w, v = dz/w^^, then we have both d^ = and 
d^o* = c^''*, so that a-'+' = c^''*. Now, i + j = mod r and z + j = 2 mod 2s, so 
i + j = 2st for some t coprime to s. Arguing as in the preceding paragraph, we find 
that the degree of N over K is divisible by s, a contradiction. □ 

Lemma 4.2. Let m > 2 be an integer, let K be a field whose characteristic does 
not divide m, and suppose that K contains the m-th roots of unity. Suppose a G K* 
is not an m-th power and let b be a nonzero element of K . Then any K -rational 
automorphism ip : V]^ —^ that takes the set of roots in K of the polynomial 
— a ^ K[x\ to the set of roots of ~ b is of the form x ^ cx or x t—^ c/x for 
some nonzero c € K . 

Proof. Let L be the splitting field of x'" — a over let cr be a generator for 
GalL/K, and let C be the m-th root of unity such that a"^ — (a for all roots a 
of — a. Let d be the multiplicative order of (, so that d is the degree of the 
irreducible factors of — a in K[x]. Note that d > 1 because a is not an m-th 
power. Since ip is if -rational, there is a primitive d-th root of unity ^ in if such 
that 13" = C/3 for all roots /? of a;™ - b. 

Let a and /3 be roots of x"* — a and x"^ — b, respectively, such that ip(a) — (3. 
The fact that ifj is if -rational implies that ipicJ) ~ /3'^ for all t e GalL/K, so we 
have V'(C*Q^) — CP for all integers i. Let x be the automorphism of Pi^ such that 
x{x) = ^/j{ax) I (3. Then x(C') = C for all i- Let r, s, t, u be elements of K such that 
X{x) = [rx + s)/(tx + u). The conditions that x(0 = T for « € {Oj 1: 2, 3} show 
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that [r, s, —t, —u] is an element of the null space of the Vandermonde matrix 

^111 1^ 

c 1 e 
e 1 

^3 1 (.3^3 ^3 

Therefore the determinant of this matrix is 0, and it follows that cither C = ^ or 

a = i. 

Suppose that d > 2. If C = C then x agrees with the automorphism x i-^ x for 
three distinct values of x (namely 1, and ^^), so x(a;) = x and ip{x) = cx with 
c = (3/a. If — 1 then x agrees with the automorphism x 1/x for three distinct 
values of x, so xi^) — ^/x and ipi^) = c/x with c = /3a. 

Suppose that d — 2. Then ip(—a) = —Tp{a) for every root a of x"^ — a, and 
it follows that xi^v) = ^xiv) fo'' every m-th root of unity rj. Since x(a;) — 
[rx + s)/{tx + m), we find that rtrf' = sw for every m-th root of unity rj. Since 
m > 2, we must have rt = su = 0, and we see that either ip{x) = cx or ip{x) — c/x 
for some constant c. □ 

Remark. The lemma would be false without the assumption that a is not an m-th 
power. For example, suppose r and s are nonzero elements of ¥p with r'^ ^ s^. 
Then the automorphism x i—^ {rx + s)/{sx + r) permutes the roots of x^^^ — 1. 
However, the lemma would remain true if we replaced the hypothesis about a with 
the hypothesis that to ^ 0, 1 mod p. 

Construction 4.3. Let r > 1 and s > 1 be odd integers that are coprime to one 
another. Let q be a power of 4 that is congruent to 1 modulo rs and let a be a 
generator of ¥*. Let m be an integer that is congruent to —1 modulo r and to 1 
modulo s. Let C and D be the curves over K = ¥q defined by 



C 



^7 a 

D : V +v ^ . 

Then C and D are twists of one another, and they have minimal isomorphism 
extensions of degrees r and s over K . 

Proof. We start by showing that C and D become isomorphic to one another over 
the extensions of K of degrees r and s. 

Let L be the degree-r extension of K and let e be an element of L with e^ — a. 
Set c — e*^™"^^/**. Then u = cw, v = z gives an isomorphism from Cl to D^. 

Let M be the degree-s extension of K and let e be an element of M with = a. 
Let uj be an element of K such that uj"^ + uj = 1. Set c = e^™+^^/''. Then u = c/w, 
V = z + LJ gives an isomorphism from C m to Dm ■ 

Now let be a finite extension of K of whose degree c? is a proper divisor of r or 
of s; we must show that Cjq and Djv are not isomorphic to one another. Suppose, 
to obtain a contradiction, that there is an isomorphism Lp from Cn to -Dat. Then Lp 
induces an isomorphism Tp from Pjy to P]y that takes the roots of the polynomial 
/ = a;''* -\- a € N[x] to the roots oi g = x"^^ + a"*, and since / has no roots in N 
we see from Lemma 14.21 that Tp is either of the form x ^-^ cx ov x ^-^ c/ x for some 
constant c E N. 
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If ^(x) — cx, then the roots of {cxy + a™ must be the roots of x'"'* + a, so 
a™~^ = c''*. As in the proof of Construction 14. 1[ we find that a must be an r-th 
power in N, so d is a muhiple of r, a contradiction. Similarly, if Tp^x) = c/x then 
we find that a™+^ — d'^, so that a is an s-th power in N, and d is a multiple of s, 
again a contradiction. □ 

Remark. The curves in Constructions WA\ and have genus rs ~ 1. 

Construction 4.4. Let p and s be distinct prime numbers, let q be a power of p 
that is congruent to 1 modulo s, and let a be a generator of ¥*. Let C and D be 
the curves over K = ¥q defined by 

C : z'i-z = w' -\ 
D : v'' - V ^ au^ — 1. 

Then C and D are twists of one another, and they have minimal isomorphism 
extensions of degrees p and s over K . 

Proof. Let L be the degree-p extension of K and let e be an element of L with 
— e = a — 1. Then u = w, v = az + e gives an isomorphism from Cl to D^. 
Let M be the degree-s extension of K and let e be an element of M with = a. 
Then u = w / e, v = z gives an isomorphism from Cm to Dm- 

To complete the proof, we must show that C and D are not isomorphic to one 
another over K. To see this, we can simply note that C and D have different 
numbers of if -rational points. Both curves have a single rational point lying over 
the (singular) point at infinity in the models given above. The curve D has no 
further rational points, because if u and v are elements of K then v'' — v = Q but 
au^ 7^ 1, because a is not an s-th power. On the other hand, C has sq further 
rational points: z can be an arbitrary element of K , and w can be an arbitrary s-th 
root of unity. □ 

Remark. The curves in this construction have genus {q — l)(s — l)/2. 

One can relate these constructions to our discussion of automorphism groups. 
For example, the curves C and D from Construction 14.11 are both twists of the 
curve X over Fg defined by = x'^'^'' -I- 1. Let a be the generator of F* chosen in 
Construction [5TT1 let a € Fq satisfy a^''* — a, and let C be the primitive 2rs-th root 
of unity a"^"^. The curve X has some obvious automorphisms p, tp, rj defined by 

p(x,y) = {Cx,y) 
fix,y) = {l/x,y/x'''') 
v{x,y) = {x,-y). 

The subgroup G of Aut X generated by these automorphisms has order 8rs, and one 
can show that when 2rs ^ 1 mod p the curve X has no geometric automorphisms 
other than these. The curve C is the twist of X by {rjpY and the curve D is the 
twist of X by {rjpY . One can compute that the r-th powers of {rjpY and (jyp)-' are 
conjugate to one another in G, as are their s-th powers, but their d-th powers are 
not conjugate to one another when d is a proper divisor of r or of s. 

Similar computations can be made for the curves that appear in Construc- 
tions [43] and IHl 
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Remark. The constructions in this section depend rather visibly on the existence of 
elements of order r and s in the group Aut PL . When Kq = ¥p this group contains 

no elements of order , so any explicit construction that deals with general values 
of r and s will have to use ideas not present in this section. 

Remark. Suppose r and s are distinct prime numbers, and let p be either or a 
prime. Then we can apply one of the constructions given in this section to produce 
explicit equations for curves C and D over a field of characteristic p that satisfy 
the conclusion of Theorem 11.31 Thus, this section provides a proof of Theorem II. 31 
in the special case where r and s are prime. 

5. The nonexistence of genus-0 examples 

In this section we give a proof of Theorem 11.51 that uses no Galois cohomology. 
Before we start, we note that there is a short proof based on quaternion algebras and 
the Brauer group. First, one can relate twists of the projective line to quaternion 
algebras (as in '19', §111.1.4]); the proof then reduces to the problem of showing that 
two quaternion algebras Hi and H2 over K that become isomorphic to one another 
over an odd-degree extension L oi K are already isomorphic over K. The classes of 
Hi and H2 in the Brauer group Bt{K) of K have order 2, so we would like to show 
that the 2-torsion element [Hi] — [H2] of Br(i^), which becomes trivial in Br(i), 
is trivial already in Tir{K). If L is a separable extension of K there is an easy 
argument that shows this; if L is inseparable over K, we can use [171 Exer. X.4.2]. 
For those readers familiar with the concepts involved, this is a reasonably direct 
method of proof. The proof we present here is slightly longer, but it uses much less 
machinery. 

We start with some basic facts about curves of genus 0. 

Lemma 5.1. Let C be a genus-0 curve over a field K. Then there is an embedding 
of C into as a nonsingular conic. Also, C is isomorphic to P"'^ if and only if it 
has a rational point. 

Proof. The canonical divisor class of C has degree —2. Let D he —1 times a 
canonical divisor. Then the Riemann-Roch formula shows that for every positive 
integer n, we have £{nD) = 2n + 1. In particular, we find that there are three 
linearly independent functions x, y, z in L(D); furthermore, since £{2D) = 5, there 
must be a relation among the 6 functions x'^, xy, xz, y^ , yz, z^ . This relation defines 
a conic C in P^ and a map C C . If C" were singular, its defining equation 
would factor into the product of two linear terms, contradicting the fact that x, y, 
and z are linearly independent. Using the fact that £{nD) = 2n-|- 1 it is not hard to 
show that the functions x^y^ z^ with i + j + k = n span L{nD), and it follows that 
the function field of C is generated by x, y, and z. Therefore, the map C ^ C" is 
an isomorphism. 

If C is isomorphic to P^ then it has a rational point. Conversely, if C = C" has 
a rational point, then projecting C away from this rational point onto our favorite 
copy of P^ in P^ will give us an isomorphism from C to P^ . □ 

Next, we require a result about quadratic forms. 

Lemma 5.2 (Springer). Let Q be a quadratic form over a field K . If Q represents 
over an odd-degree extension L of K , then it represents over K. 
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Proof. For fields of characteristic not 2, this is proven in [21] (and reproduced, for 
example, in [16|, Thm. 2.5.3]). But the proof is surprisingly simple, and works in 
characteristic 2 as well, so we present the proof here for the reader's convenience. 

We argue by contradiction. Let n be the smallest odd integer for which there is 
a field K, a degree-n extension L of K, and a quadratic form Q over K for which 
the lemma fails. (Note that clearly n > 1.) The minimality of n shows that there 
are no fields intermediate between L and K, so there is a primitive element a for 
L over K . Let p G K[t\ be the minimal polynomial for a. 

Let m be the number of variables for the quadratic form Q, and suppose /3i , . . . , /?„ 
are elements of L, not all zero, such that Q(/3i, . . . , (3m) — 0. Let /i, . . . , /m G K[t] 
be polynomials of degree at most n — 1 such that (3i = fi{a) for all i. Then in the 
polynomial ring K[t\ we have 

Q(/i, ■ ■ • ,/m) = modp, 

but fi^O mod p for some i. These relations will still hold if we divide each fi by 
the greatest common divisor of all of the /,; , so we may assume that the fi have no 
nontrivial common factor. 

Let k be the largest degree of the fi, and for each i let bi be the coefficient of t'' 
in fi. Then 

Qifi, /m) = Q{bi, ■ • ■ , bm)t'^'' + (lower order terms), 

and since Q does not represent over K we see that Q(/i, . . . , fm) is a polynomial 
of degree 2k < 2n. Thus we have Q{fi, ■ . . , fm) = pq for some polynomial q whose 
degree is odd and is less than n. One of the irreducible factors of q must also have 
odd degree less than n. Let r be one such factor of q. 

Let L' be the extension of K defined by r, and let a' be a root of r in L' . For 
each i let = /i(a'). The are not all because the fi are not all divisible by r. 
But Q{(3'i, ■ ■ . ,P'm) = Oj so L' is an extension of K of odd degree less than n for 
which the lemma fails. This contradicts the definition of n. □ 

Remark. For an amusing exercise, the reader should determine how the proof fails 
without the assumption that n is odd. 

As a corollary to Springer's theorem, we get a special case of Theorem 11.51 

Corollary 5.3. Let C be a genus-0 curve defined over a field K . If C has a point 
over an odd-degree extension L of K , then C has a point over K. 

Proof. Lemma [5T] shows that C has can be written as a conic in P^, so there is a 3- 
variable quadratic form Q that gives an equation for C . If C has a point over L then 
this quadratic form has a nontrivial zero over L. Springer's theorem then shows 
that the quadratic form has a nontrivial zero over K, so C has a point over K. □ 

We need one more lemma before we can prove Theorem 11.51 

Lemma 5.4. Suppose C is a genus-0 curve over a field K, and let M be a separable 
quadratic extension of K over which C has points. Let P and Q be points of C{M) 
that do not lie in C{K) and that are not Gal M / K -conjugates of one another. Then 
there is a (K-defined) automorphism a of C such that a{P) = Q. 

Proof. If P = Q we simply take a to be the identity, so we may assume that P ^ Q. 
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Let a be the nontrivial element of Gal M/if. Consider the subvariety V of the 
variety Aut(C) defined by 

{a e Aut(C) : a(P) = Q., aiP") = Q" ., = 1}. 

The conditions defining V are stable under GalM/if , so V is defined over K. Over 
M, there is a constant a ^ 0, 1 such that V is isomorphic to the subvariety of 
AutP^ consisting of involutions that send to oo and 1 to a; clearly, this latter 
variety has exactly one geometric point, corresponding to the involution x i— *■ ajx. 
So V has one geometric point, which is defined over M. ft follows that this single 
point is defined over K. The lemma follows. □ 

Proof of Theorem 11.51 We are given genus-0 curves C and D over a field K that 
become isomorphic to one another over an odd-degree extension L of K, and we 
are to show that C and D are isomorphic over K. If either C or D is isomorphic 
to , then the desired result follows from Corollary 15.31 and Lemma 15.11 Thus we 
may assume that neither C nor D has a if -rational point. 

Let M be a separable quadratic extension over which C has rational points; the 
fact that C can be represented as a nonsingular conic shows that such fields exist. 
Let P be an element of C(M), and let N be the compositum of L and M over K. 
Let (fi be an isomorphism from to Di^. Then (p{P) is an iV-rational point of D. 

We see that the curve Dm over M has an A^-rational point, where [A^ : M] = 
[L : K] is odd. CoroUarv 15.31 shows that therefore Dm has a point over M; in other 
words, there is an M-rational point Q on D. Replacing Q with its M/if-conjugate, 
if necessary, we may assume that Q is not the A^/L-conjugate of fiP). 

Applying Lemma 15.41 to the curve Dl over L and the TV-rational points (p{P) 
and Q of Dl, we find that there is an automorphism a of Dl that sends (p{P) to Q. 
Replacing ip with aip, we find that ip is an isomorphism Cl D^ that takes P 
to Q. 

Consider the subvariety V of the variety Hom(C, D) defined by 

e Hom(C, D) : ^{P) - Q, ^(P^) - Q'^}, 

where again we take a to be the nontrivial element of G&\M/K. The conditions 
defining V are stable under Gal M/if, so V is defined over K. Over M, there is a 
constant a 7^ 0, 1 such that V is isomorphic to the subvariety of Aut consisting 
of automorphisms that send to cx) and 1 to a; it is easy to see that this latter 
variety is isomorphic to P^ minus two points. Thus, our variety V is isomorphic 
to a genus-0 curve W with two points removed. Our isomorphism ip : Cl ^ Dl 
shows that the variety V has a point over L, so the genus-0 curve W has a point 
over L as well. By Corollary l5.3l W has points over K , and so is isomorphic to P^. 
But over any field, P""^ minus two points has rational points, so V has a AT-rational 
point. Therefore C is isomorphic to D over K . □ 

Over finite fields we can say more than is claimed by Theorem 11.51 By Wed- 
dcrburn's theorem, there are no nontrivial quaternion algebras over a finite field. 
Therefore, there are no nontrivial twists of P^ over a finite field. 

6. Group theory 

In this section we state and prove several group-theoretical results that are 
needed for the proof of Theorems 11.41 and 11.71 First some notation: if x and y 
are elements of a group G, we write x '-^ y ii x and y are conjugate in G. 
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Suppose G is a finite group and a is an automorphism of G. We view G as a 
topological group by endowing it with the discrete topology. There is a continuous 
homomorphism Z Aut G that sends 1 to a. Using this action, we may consider 
the pointed cohomology set H^{Z, G) defined in Section [21 we denote this pointed 
set by i?^(Z, G, a) to specify the Z-action. We identify a cocyclc a : Z ^ G with 
a(l) G G, and given a cocycle x € G, we let [x]^ denote its class in H^{Z, G, a). 

Theorem 6.1. Let G and a be as above, and let r > 1 and s > I be inte- 
gers that are coprime to one another. Suppose x and y are two cocycles such 
that [xx" ■ ■ ■ x""^ ]a'- = [yy" ■ • • y""^ and [xx" • • • x'^° J^a = [yy" • • • y°'° 

but such that for every proper divisor d of r or of s we have [xx°' ■ ■ ■ x" J^d ^ 
[yy" ' ' ' y°' ]a<'- Then the order of G is divisible by rs but is not equal to rs. 
Furthermore, if rs = 2 mod 4 then the order of G is divisible by 2rs. 

Our proof of Theorem 16.11 relies on three lemmas, which we prove later in this 
section. The first lemma allows us to rephrase the statement of the theorem in 
terms of conjugacy in an extension of G. 

Lemma 6.2. Suppose G is a finite group and a is an element of Aut G. Let Z act 
on G by having 1 € Z act as a. Let x and y be elements of G and let m be a positive 
integer. Then the cocycles Z — > G determined by xx" ■ ■ ■ x°' and yy°' ■ ■ ■ y" 
are cohomologous in iJ^(Z, G, a™) if and only if the m-th powers of the elements 
(x, a) and (y, a) of the semidirect product A = G^i (a) are conjugate to one another 
in A. 

The second lemma allows us to deduce much of Theorem 16.11 by looking at the 
conditions on r and on s separately. 

Lemma 6.3. Let A be a finite group with a normal .subgroup G .such that A/G is 
cyclic. Let X and Y be elements of A that have the same image in A/G. Suppose 
there is a positive integer r such that ~ y but X'^ for all proper divisors 

d of r. Then r divides ^G. 

Finally, the third lemma gives us stronger information at the prime 2. 

Lemma 6.4. Let A be a finite group with a normal subgroup G such that A/G is 
cyclic. Let X and Y be elements of A that have the same image in in A/G. Suppose 
that X"^ ~ and that X^ ~ Y^ for some odd integer r > 1, but that X Y . 
Then 4 divides #G. 

With these lemmas in hand, we can prove Theorem 16. II 

Proof of Theorem 16.11 Let A be the semidirect product G xi (a) and let X and Y 
be the elements {x, a) and (y, a) of A. Lemma 16.21 shows that the hypothesis of 
the theorem is equivalent to the statement that X^ ~ y and X* ^ F** but that 
j^d ^ yd ^jj proper divisors d of r or of s. 

Lemma 16.31 shows that #G is divisible by both r and s, and since r and s are 
coprime, we find that rs divides #G. Suppose one of r and s is congruent to 2 
modulo 4, say s = 2 mod 4. Applying Lemma [6.41 to X"/^ and Y^^"^, we see that 
#G is divisible by 4, so that 2rs divides #G. 

Suppose that #G = rs. The element X oi A acts on the normal subgroup G 
of A by conjugation. Theorem 2 of [9] says that an automorphism of a nontrivial 
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finite group has order less than that of the group (this is also an easy consequence 
of [SI Thm. 1]), so there is a positive m < rs such that acts trivially on G. 
Since r and s are coprinie to one another, they both cannot divide m. Switch r 
and s, if necessary, so that r does not divide m. Replacing K by a conjugate, we 
may assume that = Y^. 

Since commutes with X, and since A is generated by G and X, we see 
that lies in the center of A. Since y™'' is conjugate to X"^"^, we see that 
ymr _ x"^^ . Likewise, F™'* — X™^. Since r and s are coprime to one another, 
we find that y™ = X™. Combining this with the fact that X"" = we find 
that X^ = Y^, where g — (m^r) is a proper divisor of r. This contradiction shows 
that #G > rs. □ 

We are left with the proofs of our three lemmas. 

Proof of Lemma 16.21 We know from Section [2] that the cocycles xx" ■ ■ ■ x" and 
yy" are cohomologous if and only if there is a z e G such that 

yy ■■■y —z xx ■■■x z . 

Suppose the two cocycles are cohomologous, and let z be as above. Then in A 
we have 

(yy" • • ■ y"""\ «") = {z'^xx" ■■■x"'"~\"'^,a"') 

= (z,l)-i(a;x"---a:"""\a")(z,l). 

But {yy" ■ ■ ■ a™) = and (ra" • • • a;"""' , a™) = X™, so and are 

conjugate in A. 

Conversely, suppose that ~ W^^X"^W for some W = (wjO^) in A, where 
we choose i>0. Then we have 

yy • ■ ■ y = w x x ■ ■ - x w 

— 1 —2 — i — i 

Setting z — x^" x^" • • • a:~" , we find that the right-hand side of the 

preceding equality is equal to z~^xx'^ • • • , so the two cocycles are coho- 

mologous. □ 



Proof of Lemma 16.31 The lemma is trivial when r = 1 , so we assume throughout 
the proof that r > 1. To prove the first statement of the lemma for a given X, Y, 
and r, it suffices to prove the statement for X' — X"^, Y' = y*, and r' — r/d, for 
all divisors d of r such that r/d is a prime power. Thus we may assume that r is a 
power of a prime p. 

By replacing Y with a conjugate element, we may assume that X^ — y . Then 
X and Y both lie in the centralizer Ca(X'^) of X^ in A, and it will suffice to prove 
the lemma with A replaced by Ca{X'') and G with G n Ca{X''). (Note that the 
hypotheses of the lemma still hold when we make these replacements.) 

Now write X = X1X2, where Xi and X2 are powers of X such that the order of 
Xi is a power of p and the order of X2 is coprime to p. Likewise, write Y — Y1I2. 
Since X^ — Y^ , we have X2 = Y2; furthermore, this element is a power of X"^ and 
so lies in the center of A. 

We claim that XI — Y{ and that Xf ^ Yf for all proper divisors d of r. The 
first statement follows from the facts that X'^ — F'' and X2 — Y2. To prove the 
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second statement, we note that if Xf ^ Yf, we can multiply both sides of the 
relation by the central element X| = Y2 to find that X'^ ^ V^. 

Replacing X and Y with Xi and Yi , we find that it suffices to prove the lemma in 
the case where X and Y have p-power order. Again replacing Y with a conjugate, 
we may assume that there is a p-Sylow subgroup 5 of A that contains both X 
and Y. Replacing A with S and G with G H S, we see that we may assume that A 
is a p-group. 

We prove the lemma for p-groups by induction on ^A. The base case ^A = 1 
is trivial. 

Since r > 1 we know that X and Y are not conjugate to one another; since they 
have the same image in A/G, the group G must be nontrivial. Every nontrivial 
normal subgroup of a p- group contains a nontrivial central element, so there is an 
order-p subgroup Z of G that is central in A. Let A' — A/Z and G" = G/Z, let x 
and y be the images of X and Y in A' , and let s be the smallest divisor of r such that 

^ y^. Replacing y by a conjugate, we may assume that = y^. Then we have 
— cY'^ for some c in Z, and it follows that s is either r or r/p. In either case, 
the induction hypothesis shows that r/p divides #G', so that r divides #G. □ 

Proof of Lemma 16. 4[ We know from Lemma 16.31 that #G is even. Suppose, to 
obtain a contradiction, that ^G is not a multiple of 4. Then the odd-order elements 
of G form an index- 2 characteristic subgroup O of G; if g is an element of G of 
order 2, then G — O ■ (g). The subgroup O of G is fixed by every automorphism of 
G, so O is normal in A as well. 

Replacing Y by a conjugate, we may assume that X^ = Y^. Since X and Y 
have the same image in A/G, we may write Y = gX for some g € G. We claim 
that in fact g G O. To see this, note that A/O is an extension of the order- 2 group 
G/O by the abelian group A/G, so that A/O is abelian. Since X^ is conjugate to 
y, the images of these elements in A/O are equal. In particular, this shows that 
the image of g in G/O C A/O has odd order, and so is trivial. 

Now let A' ^O- (X) and G' O. The elements X and Y of A' satisfy X^ = 
and X / y, so by Lemma l673l we see that G' has even order, a contradiction. □ 

The following example shows that Theorem l6.1l is sharp, in the sense that for any 
r and s there are elements x and y of the dihedral group I?2rs and an automorphism 
a of D2rs that satisfy the hypotheses of Theorem 16.11 

Example 6.5. Let r > 1 and s > 1 be two integers that are coprime to one 
another, and let G be the dihedral group of order 2rs. Choose generators u and v 
for G such that u^'^ = v'^ = 1 and vuv = u~^. Let a be the involution of G that 
sends u to u^^ and v to uv. Let m be an integer that is congruent to modulo r 
and congruent to 1 modulo s, and take x — uv and y ~ u™v. We claim that x and 
y satisfy the hypotheses of Theorem 16. II 

To see this, we first note that for any positive integer d we have 
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On the other hand, if z = for some integer a then 

if d is even; 
if d is odd 



while if z — u°'v then 



if d is even; 
if d is odd. 



One can then check that then we have 

(1) 2/2/"2/"' • ■ ■ y""'' = z"^a;a;"x"' • • • a;"" ' z" 

for some z = u° if and only if = 1, and that ([T|) holds for some z = u°'v if 

and only if u™'' — 1. The first condition holds if and only if r | d, and the second 
condition holds if and only if s | d. 



However, Theorem 16.11 can be sharpened in the case where the automorphism a 
is the identity and rs is even. In this case, the cohomology set i7^(Z, G, a) is just 
the set of conjugacy classes of G. 

Theorem 6.6. Let r > 1 and s > 1 be integers that are coprime to one another. 

Suppose G is a finite group that contains two elements x and y such that x^ ~ y^ 
and x'^ ^ y^ , hut such that x'^ ^ y'^ for all proper divisors d of r or of s. Then ^G 
is divisible by rs but is not equal to rs. If rs is even then ^G is not equal to 2rs, 
and if rs = 2 mod 4 then ^G is divisible by 2rs. 



Proof. We know from Theorem 16.11 that ^G is divisible by rs but is not equal to 
rs, and we know that if rs = 2 mod 4 then #G is divisible by 2rs. All we have 
left to prove is that if rs is even, #G cannot be equal to 2rs. Suppose, to get a 
contradiction, that rs is even and #G — 2rs. By switching r and s, if necessary, 
we may assume that r is odd and s is even. 

The orders of x^ and y^ are equal, as are the orders of a;* and y^ . Since r and 
s are coprime, the orders of x and y are equal. Denote by n this common value. 
We claim that n is divisible by rs. To see this, suppose there were a prime power 
q = p'^ with q \ rs but q \ n, say with q \ r. Write x = X1X2, where xi is a power 
of X with p-power order and X2 is a power of x with prime-to-p order, and write 
y = 2/12/2 likewise. Our assumption is that a;^^^ = y'^^^ = 1. Since x"^ ^ y^ we see 
that X2 ^ y2- But since the orders of X2 and ?/2 are coprime to p, there is an integer 
m with X™ = X2^^ and j/™ = 2/2^^' so that X2^^ Ihl''^ ■ But since x-^^ = y\^^ — 1, 
we have x^l"^ ^ y^l"^ as well, contradicting the hypotheses of the theorem. Thus, n 
is divisible by rs. 

In fact, n must be equal to rs; for if n were equal to 2rs, then G would be 
abelian, and no abelian group satisfies the hypotheses of the theorem. 

Thus the subgroup (x) of G has index 2 and is normal. Let z be an element of 
G that is not in (a;). Then zxz"^ = x°- for some a and z^ = x^ for some h. Note 
that 

_ 1 -2 _ a -1 _ 

so that = 1 mod rs. In particular, a is coprime to rs. 

We know that x^ and y^ are conjugate in G, so their images in G/ (a;) = G2 are 
conjugate, hence equal. Since r is odd, the images of x and y in G/ (x) must be 
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equal, so y lies in (x), say y = x^. Since x and y have the same order, c must be 
odd. 

Note that conjugating by an element of G gives either x^ or x'", depending 
on whether the element we are conjugating by is a power of x. Since x'^ ~ y** we 
see that 

cs s cs as 

X = X OT X = X . 

Thus, either c = 1 mod r or c = a mod r. Suppose that c = 1 mod r. Then we 
claim that cs/2 = s/2 mod rs. To check that this congruence holds, we need only 
note that it holds modulo r (because c = 1 mod r) and that it holds modulo s 
(because cs/2 = s/2 mod s, since c is odd). Thus, y"/^ is conjugate to x'^/'^, a 
contradiction. 

Likewise, if c = a mod r, we find that cs/2 = as/2 mod rs, and again y^^'^ is 
conjugate to x^/^. □ 

Any group satisfying the hypotheses of Theorem 16.61 for an s that is congruent 
to 2 modulo 4 must have order at least 4rs, but it is not necessary for its order to 
be a multiple of 4rs. We now construct an example for r = 3 and s = 2 where the 
group G has order 2^ •3'^. 

Example 6.7. Let Vi be a 2-dimensional vector space over F2 and let V2 be a 
2-dimGnsional vector space over F3. Let ai S Aut Vi and a2 G Aut V2 be auto- 
morphisms of order 3, and let A be the subgroup of Aut Vi x Aut V2 generated by 
a = (ai, a2)- We take G = (Fi x V2) x A, so that G has order 2^ • 3^. 

Let vi be a nonzero element of Vi and let W2 be an element of V2 that is not fixed 
by a2- Let x and y be the elements (fi,W2) and (ai(ui),t;2) of Vi x V2, viewed as 
elements of G. It is easy to see that x and y are not conjugate in G. But and 
y^ are conjugate (because they are equal), and x^ is equal to the conjugate of y'^ 
by a. 

7. The unique genus-1 example 

In this section we prove Theorem 11.71 First we make some general comments 
about twists of genus-1 curves. 

Suppose E is an elliptic curve over a perfect field K . This means that E' is a curve 
of genus 1 together with a specified if-rational point O, the identity element for 
the group law on E. Note that there is a distinction between an automorphism of 
E as a, curve and an automorphism of E as an elliptic curve; a curve automorphism 

of iJ is an elliptic curve automorphism if and only if ip{0) = O. We denote the 
group of elliptic curve automorphisms of E by Aut(i?, O). 

Every if-rational point P oi E gives us an element of AutE"^, namely the 
translation-by-P map, so there is an injection E{K) AutEj^. It is not hard to 
show that in fact we have 

Aut% = E{K) X Aut(Ej^, O), 

so there is a split exact sequence 

^ E{K) AutEj^ ^ Aut(%, O) 0. 

Applying Galois cohomology to this sequence, we obtain a map of pointed sets 
TT : {Gal K/K, Aut Ej^) H^{GalK/K,Aut{Ej^,0)). This map takes the class 
of a genus-1 curve F to the class of its Jacobian. This fact makes it clear that tt is 
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surjective, because given a pointed curve {F,P) that is a twist of {E,0), we have 
7r([F]) — [{F, P)]. In other words, every twist of the elhptic curve E conies from a 
twist of the genus-1 curve E. When K is finite, the converse is true as weh. 

Lemma 7.1. If K is a finite field then the map n is a bijection. 

Proof. Suppose that Fi and F2 are genus-1 curves that correspond to classes in 
H^{GalK/K,AutEj^) having the same image in H^{GalK/K,Aut{Ej^,0)); that 
is, suppose that Jac-Fi = Jac-F2. Deuring proved that every genus-1 curve over a 
finite field has a rational point; in fact, the Weil bounds show that a genus-1 curve 
over ¥q must have at least q + 1 — > 1 points. But a genus-1 curve with a 
rational point is isomorphic to its own Jacobian, so we must have Fi ^ i^2- Thus, 
TT is injective. □ 

Lemma mi shows that over a finite field, the twists of a genus-1 curve E coincide 
with the twists of E viewed as an elliptic curve, so we may replace the infinite group 
Aut Ej^ with the finite group Aut(i?j^, O). 

Proof of Theorem 11.71 Suppose E and F are distinct elliptic curves over K ~ ¥q 
that are twists of one another and that have minimal isomorphism extensions of 
degrees r and s. Then Theorem 16 . II shows that the geometric automorphism group 
of E has order divisible by rs and greater than rs. Silverman [201 Prop. A. 1.2] lists 
the possible orders of automorphism groups of elliptic curves. Using Silverman's 
list, we see that either r = 2 and s = 3 and the elliptic curves E and F are twists of 
the j-invariant curve in characteristic 2 or in characteristic 3, or r = 3 and 5 = 4 
and E and F are twists of the j'-invariant curve in characteristic 2. First let us 
examine the cases where r = 2 and s = 3, starting in characteristic 2. 

Suppose K is an odd-degree extension of F2, so that q — 2'^ for some odd d. 
Up to isomorphism over K, there are exactly three elliptic curves over K with 
j-invariant 0; they are 

Ei: y^ + y = x^ 

E2- + y^x^ + x 

E3: y"^ + y = x^ + X + 1. 

It is easy to check that these curves are pairwise nonisomorphic over K — in fact, 
one can check that their Frobenius endomorphisms are (respectively) tti = {■\/—2)'^ 
and 7r2 = (—1 -I- V—^)'^ and 773 = (1-1- ^/^Y, so they are not even isogenous to one 
another over K. One can check that these are all of the twists of the j = curve 
by verifying that J2^=i l/# Auti?i = 1 (see Lemma [2?2|) . But these three curves 
remain distinct over the cubic extension of K; therefore, there are no curves C and 
D over K as in the statement of Theorem 11.71 when r ~ 2 and s ~ 3. 

Suppose K is an even-degree extension of F2. Then C and D are both twists of 
the elliptic curve Ei defined above. All of the geometric automorphisms of Ei are 
defined over K, and by [23 Exer. A. 1(b)] we see that the automorphism group G of 
El is isomorphic to SL2(F3). Then by Lemma I^TT] we see that C and D correspond 
to two nonconjugate elements of G whose squares and cubes are conjugate. But an 
easy calculation shows that there are no such elements in G. 

Suppose K is an even-degree extension of F3. Our argument in this case is the 
same as in the preceding paragraph: The curves G and D are both twists of the 
elliptic curve E defined by y^ = x'^ — x. All of the geometric automorphisms of E 
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are defined over if, and the automorphism group G of -E is isomorphic to C3 xi C4, 
where C4 acts on C3 in the unique nontrivial way (see [201 Exer. A. 1(a)]). Then 
by Lemma \TT\ we see that C and D correspond to two nonconjugate elements of G 
whose squares and cubes are conjugate. But again, an easy calculation shows that 
there are no such elements in G. 

Thus we find that when r = 2 and s = 3, the field K must be an odd-degree 
extension of F3 . Now we show that for every such field we can find elliptic curves 
C and D as in the theorem. 

Let a be an element of K with Ti^/f.^ a 7^ 0, and let C and D be the two curves 

2 3 
C: y = X — X — a 

D: v'^ = — u + a. 

It is easy to check that these curves are not isomorphic to one another over K. But 
if i is an element of the quadratic extension of K with = —1, then u = ~x, v = iy 
gives an isomorphism from C to D; and if a is an element of the cubic extension 
of K with — a = a, then u = x + a,v = y gives an isomorphism from C to D. 

Now let us consider the case r = 3 and s = 4. Suppose there were two genus-1 
curves C and D over a finite field K satisfying the conclusion of Theorem 1 1 . 71 with 
r = 3 and s = 4. As we have seen, K must have characteristic 2. Let L be the 
quadratic extension of K. Then the curves Cl and Dl satisfy the conclusion of 
Theorem II. 71 with r = 2 and s = 3. But we have just seen that no such examples 
exist in characteristic 2. □ 

8. Proof of Theorem 11.41 

In this section we prove a strong version of Theorem 11.41 

Theorem 8.1. Let Kq be a finite prime field ¥p, let r > 1 and s > 1 be integers 
that are coprime to one another, and let C and D be curves over a finite extension 
K of Kq that satisfy the conclusion of Theorem 11.31 Then the genus g of C and 
D is larger than 0. If g = 1, then {r, s} = {2,3} and the geometric automorphism 
group of C {and D) viewed as an elliptic curve is C3 x C4; furthermore, not all of 
these automorphism are K-rational. If g > 1, then the geometric automorphism 
group G of C [and D) has order divisible by rs, but not equal to rs; if rs = 2 mod 4 
then ^G is divisible by 2rs; and if ff^G = 2rs then no twist of C has all of its 
geometric automorphisms defined over K . 

Proof. It follows from Theorem 11.51 that g > 0, and the statements about the 
genus- 1 case follow from Theorem 11.71 and its proof. 

Suppose g > \. Let a E Aut G be the automorphism of G that describes the 
action of the (/-power Frobenius on G, where q = f/=K. As we saw in Section [2l 
the twist D oi C corresponds to an element of II^{Ga\K/K,G) = i/^(Z, G, a). 
Suppose this element is represented by a cocycle that sends the Frobenius to j/ € G. 
Then, in the notation introduced at the beginning of Section [6l we have [l]a'- = 
[yy" ■ • • 2/" ]a'- and [IJqs — [yy" ■ ■ ■y°' ]a= but for every proper divisor d of r 
or of s we have [l]„d 7^ [yy" •••?/" J^d. Then Theorem 16.11 tells us that #G is 
divisible by rs but not equal to rs, and that if rs = 2 mod 4 then #G is divisible 
by 2rs. 

Suppose #G — 2rs, and let X be an arbitrary twist of G. Then G = AutXj^, 
and G and D are both twists of X, say corresponding to cocycles that send the 
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Frobenius to elements x and y of AutXj^, respectively. If GalK/K acted trivially 
on Aut Xj^, then x and y would be nonconjugate elements of G satisfying x"^ 
and x'^ ~ and with x"^ / y'* for all proper divisors d of r or of s. But Theorem 16. 61 
shows that this is impossible. It follows that the action of GalK/K on AutXj^ is 
nontrivial; that is, not all of the automorphisms of X are defined over K. □ 

9. GeNUS-2 EXAMPLES 

In this section we prove Theorems 11.81 and 11.101 In fact, we prove stronger 
statements that give information about the reduced automorphism groups of the 
examples that occur for a given field. 

First we review some facts about genus-2 curves. Let C be a genus-2 curve 
over a field K. Then C is hyperelliptic, so there is a unique degree-2 map from 
C to P^. Let L be the involution on C determined by this double cover, and let 
G be the automorphism group of Cj^. The subgroup (i) of G is normal, and the 
quotient group G is called the reduced automorphism group of Cj^. The group G 
acts faithfully on PL via the cover C ^ P^, so G can be viewed as a subgroup of 
Aut PL = PGL2 K. 

Let X be the set of points of PL that ramify in the double cover C ^ P^ . Then 
G stabilizes the set X, and if the characteristic of K is not 2 then every element of 
PGL2 K that stabilizes G is an element of G. 

Igusa im §8] enumerated the possible reduced automorphism groups of genus-2 
curves over the algebraic closures of finite fields. Here we determine which of these 
groups can occur for the curves mentioned in Theorem 1 1.81 First we dispose of the 
finite fields of characteristic 3. 

Theorem 9.1. // is a finite field of characteristic 3, then there do not exist 
nonisomorphic genus-2 curves G and D over that become isomorphic to one 
another over F^2 and W^a . 

Next we classify the reduced automorphism groups that occur in characteristic 
not 3. 

Theorem 9.2. Let ¥q be a finite field of characteristic not 3. Suppose C and D 
are nonisomorphic genus-2 curves over a finite field Vq that become isomorphic to 
one another over ¥^2 and F^a . Let G be the reduced automorphism group of G-^ . 

(a) // charFq > 5 then the possibilities for G are as follows: 



Given these conditions. . . 


. . .is this group possible^ 


-2 e ¥f ? 


-3 e Ff ? 








yes 


yes 


yes 


yes 


no 


yes 


no 


yes 


no 


no 


no 


yes 


yes 


yes 


yes 


no 


no 


yes 


no 


yes 



(b) // charFq = 5 then the possibilities for G are as follows: 



Given this condition. . . 


. . .is this group possible? 


-2 e Ff ? 


De 


^5 


yes 


yes 


yes 


no 


yes 


no 
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(c) // charFq = 2 then G^Dq. 
Furthermore, all of the groups listed as possibilities for a given field ¥q actually 
do occur. In particular, over every finite field of characteristic not 3, there are 
examples where C and D have geometric reduced automorphism group isomorphic 
to Dq. 

First we will prove Theorem 19. 21 then Theorem 19. 11 and finally Theorem 1 1.1 01 

Remark. On three occasions in the following proof of Theorem 19.21 we will have to 
show that if x and y are elements of a certain group G and if x^ y^ and x'^ ^ y^, 
then X ^ y. On the first occasion we will give the details of the computation. On 
the second occasion we will leave the details to the reader. On the third occasion 
we will translate the group-theoretic problem into a question about explicit curves 
over a small finite field, and then answer this question by direct computation. 

Proof of Theorem 19.21 Suppose that the characteristic of Fg is greater than 5. In 
this case, Igusa [11, §8] calculates that there are 7 possible reduced isomorphism 
groups for a genus-2 curve, each of which actually occurs over the algebraic closure: 
the trivial group, the cyclic group G2, the dihedral group Dq, the Klein 4-group 
V4 — D4, the dihedral group D12, the symmetric group S4, and the cyclic group C5. 

Since G and D are nontrivial twists of one another over the quadratic and cubic 
extensions of Fg, Theorem 11.41 says that the geometric automorphism groups of C 
and D must have order divisible by 12. We see immediately that the only possible 
reduced geometric automorphism groups are Dg, D12, and S'4. To prove statement 
(a), we must show that 15*4 cannot occur when —2 is a square in ¥q and that D12 
cannot occur when —3 is not a square in F^. 

Igusa shows that in fact there is exactly one genus-2 curve over whose reduced 
automorphism group is S'4. This curve can always be defined over F^; one model 
for it is 

y2 ^ 2)6 52)4 - + 1. 

Call this model X, and let a be a square root of —2 in F^. The geometric auto- 
morphism group G of X is generated by the automorphisms a, 7, and 5 defined 

by 

X + 1 — a 8y \ 

(-a-l)a; + l' {{a + l)x - If ) 
X + 1 2ay \ 

^5^' (x- 1)3 ; 

lix,y) = {-x,y) 
S{x,y) = {l/x,y/x^). 

The orders of these automorphisms are 3, 4, 2, and 2, respectively, and /J^ is the 
hyperelliptic involution l. Clearly all of the geometric automorphisms of X are 
defined over F^ if —2 is a square in F^; otherwise, there are only 8 elements of G 
defined over Fg, namely the subgroup generated by (3"^, 7, and 6. Note that no 
element of G has order 12, because no element of G = S'4 has order 6. 

Now suppose that —2 is a square in ¥q, and suppose that we have curves G and 
D over ¥q that are quadratic and cubic twists of one another and that have reduced 
geometric automorphism groups isomorphic to S4. Then G and D must both be 
Fg-twists of X. By Lemma I^TTl the curves G and D correspond to conjugacy classes 



a{x,y) = 



f3{x,y) = 
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in G, say the conjugacy classes of elements u and v respectively. Our assumptions 
on C and D imply that ^ and v?' ^ v'^ . Since and have the same order, 
as do and u"^, we see that u and v have the same order. If this order is a power 
of 2 then v? ~ implies that u ^ v. If this order is 3 then ~ implies that 
u ^ V. The only other possibility is that this order is 6. Since G = Si has no 
elements of order 6, if u and v have order 6 then = v'^ — l. Also, 5*4 has only 
one conjugacy class of elements of order 3, so if u and v have order 6 then either 
u ^ V or u ^ iv — v"^ . But w"* has order 3, so we must have it ~ w. In every case 
we have u ~ w, so C and D must be isomorphic to one another over ¥q. Thus, 
is not a possibility when —2 is a square in F^. 

Igusa also shows that there is exactly one genus-2 curve over Fg whose reduced 
automorphism group is Di2. This curve can always be defined over F^; one model 
for it is 

y2 = a;*^ + 1. 

Call this model X, and let w be a primitive cube root of 1 in F^. The geometric 
automorphism group G of X is generated by the automorphisms a, /?, 7, and t 
defined by 





{ujx,y) 


P{x,y) = 


(I A 






l{x,y) = 


{-x,y) 


L{x,y) = 


ix,-y)- 



The orders of these automorphisms are 3, 2, 2, and 2, respectively. Clearly all of 
the geometric automorphisms of X are defined over Fg if —3 is a square in F^; 
otherwise, there are only 8 elements of G defined over Fg, namely the subgroup 
generated by /3, 7, and l. 

Now suppose that —3 is not a square in Fg. If C and D are curves over Fg that 
are quadratic and cubic twists of one another and that have reduced geometric 
automorphism groups isomorphic to D12, then C and D are both Fg-twists of X. 
Let c and d be cocycles that represent the classes in i?-^(GalFg/Fg, G) giving rise 
to G and D, and let u and v be the images of Frobenius under the cocycles c and 
d, respectively. 

Let (j) be the element of Aut G that gives the action of the Frobenius ip £ 
GalFg/Fg on G, and let A = G >^ ((/>). Using Lemma 16.21 we see that the ele- 
ments u = (u, 0) and v = {v, 4>) of A have conjugate squares and conjugate cubes. 

Using the explicit description of G given above, it is a straightforward matter to 
show that u and v are conjugate to one another. (One can simply enumerate all 
pairs of elements of A whose squares and cubes are conjugate to one another, and 
verify that the elements themselves are conjugate to one another.) By Lemma W?^ 
we see that the cocycles c and d are cohomologous, so the curves G and D are 
isomorphic to one another over Fg . 

Thus we see that when —3 is not a square in Fg, there do not exist nonisomorphic 
curves G and D over Fg that become isomorphic to one another over Fg2 and FgS 
and that have with geometric reduced automorphism groups isomorphic to Di2. 

This completes the proof of statement (a). 
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Suppose that the characteristic of ¥q is 5. Then Igusa determines that the 
possible reduced automorphism groups are the trivial group, C2, De, -D4, and 
PGL2(F5) = S'5. Theorem II .41 shows that the only possible reduced automorphism 
groups for curves C and D as in the statement of Theorem 11.81 are Dq and S'5 . To 
complete the proof of statement (b) we must show that S'5 cannot occur when q is 
an odd power of 5. 

Let X be the curve — — x. The double cover X ^ is ramified at 
P^(F5), so the reduced automorphism group of X is PGL2(F5) = S5. The reduced 
automorphisms are defined over F5, but the automorphisms of X are not all defined 
over F5: lifting the reduced automorphism x 1— > —Ijx requires a square root of —2. 

Igusa shows that up to geometric isomorphism, X is the only genus-2 curve in 
characteristic 5 with reduced automorphism group S5, so if there are examples of 
pairs of curves C and D as in the statement of the theorem that have geometric 
reduced automorphism group S5, they will have to be twists of X. Our work in 
Section [2] shows that the existence of such C and D is really a question about 
i/^(GalFg/Fg, AutXp ). Now, this cohomology set does not depend on q, so long 
as q is an odd power of 5. Thus, to show that no C and D exist for an arbitrary 
odd power of 5, it will suffice to show that there are no such C and D over F5. 

One can easily check that the curves — f over F5, with / taken from the set 

{x^ - x,x^ - 2x, x'' + x,x^ - X + l,x''' - x + 2,x^ ~ 2,x^ - X + l,x^ - X + 2}, 

are all twists of X and are all pairwise nonisomorphic. It is also easy to check 
these curves cover all F5 -isomorphism classes of twists of X, because the sum of 
the inverses of the cardinalities of their groups of rational automorphisms is equal 
to 1 (see Lemma [2.2p . Then one can verify that no two of these curves become 
isomorphic to one another over both F25 and F125. (This last computation is not 
hard; simply by looking at the fields of rationality of the Weierstrass points of the 
curves, one finds that the only possible {C, D} pair is 

{y'^ ^ - X + l,y'^ ^ x^ - X + 2}, 

and these curves have different numbers of points over F125.) This proves state- 
ment (b). 

Suppose that the characteristic of F^ is 2. Again Igusa lists the possible reduced 
automorphism groups, and the only group on the list whose order is divisible by 3 
is the group Dq. This proves statement (c). 

The fact that the groups that we have not excluded actually do occur follows 
from Examples iJHaj] below. □ 

Example 9.3. The group Dq in characteristic greater than 3. 

Suppose the characteristic of F, is greater than 3. We first show that there is 
a genus-2 curve over F^ whose reduced automorphism group is and that has 
automorphisms that are not defined over Fg. 

Suppose t e Fg satisfies 

(2) t{t-l){t + \){t^ -t+l)T^{). 

Let n = t^-t+l, let 04 -i{f^ +t^ + 1) /t, let 03 = 2{it^ ~2t^ + it^ + it^ -2t+2,) /t, 
and let / be the polynomial 

f — x^ + a4x'^ + a^x'^ + na^x^ -f . 
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One can check that Inequahty ([2|) impUes that the discriminant of / is nonzero. 
Furthermore, one can check that the automorphisms a(x) — n/x and f3{x) = 
(tx — n)/{x— 1) of permute the roots of /. The automorphisms a and f3 generate 
a group isomorphic to Dq, so the reduced automorphism group of the genus-2 curve 
X defined by = / contains Dq. 

Igusa im §8] shows that for odd prime powers q there are at most two curves 
over ¥q whose reduced automorphism groups contain Dq and are larger than Dq] 
one can compute that the Igusa invariants of these curves are 

[20: 30: -20: -325: 64] 

and 

[120 : 330 : -320 : -36825 : 11664]. 
One can show that as long as 

(3) {t^ +t + l){3t^ -2t + 3){t^ - 4i + 1) 7^ 

the curve X does not have these Igusa invariants, so in this case its reduced auto- 
morphism group is exactly Dq. 

The automorphism (3 of automatically lifts to an Fg-defined automorphism 
of X, but a will only lift to an F^-defined automorphism if n is a square in ¥q. 
We will show that when g ^ 7 we can find a t G ¥q that satisfies Inequalities ^ 
and ([3]) and such that n is not a square. 

Let no be an arbitrary nonsquare in F^. The curve a;^ — x + 1 — riQi/^ = over ¥q 
is a nonsingular conic, so it has at least q — 1 rational points in the affine plane. At 
most 2 of these points have y-coordinate equal to 0, so there are at least (q — 3)/2 
values of t in F^ such that — t + 1 is equal to a nonsquare in F^. At most one 
of these values (namely t = —1) fails to satisfy Inequality ([2|), because the other 
values of t that fail to satisfy Inequality Q do not have the property that — t + 1 
is a nonsquare. At most six values of t fail to satisfy Inequality ([3]). Thus, as 
long as {q — 3)/2 > 7 we are assured that there is a value of t in F, such that the 
curve X constructed above has reduced automorphism group equal to Dq and has 
automorphisms that are not defined over ¥q. 

For the primes 5, 11, 13, and 17, the value t — —8 satisfies Inequalities ([2]) 
and ([3]), and — < + 1 = 73 is a nonsquare modulo these primes. 

For (7 = 7, we consider the curve X defined by 

y2 = _^ 2,5 _ ^^4 _ ^^2 ^_ 2^ - 1, 

whose Igusa invariants are [0:4:4:3:4]. The reduced automorphism group of 
X contains the automorphisms Ixix) = 2>/x and — {2x — 3)/(a; — 1), which 
generate a group isomorphic to Dq. The reduced automorphism group is no larger 
than this because the Igusa invariants of X are not equal to those of the two curves 
with larger groups, and since 3 is not a square in Fy the automorphism a does not 
lift to an Fy-rational automorphism of X. 

Thus for every ¥q of characteristic greater than 3 we know there is a genus-2 curve 
X over ¥q whose reduced automorphism group is isomorphic to Dq and is generated 
by an automorphism a of order 2 that does not lift to a rational automorphism of 
X and an automorphism /3 of order 3 that does lift rationally. 
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Let a and /3 be lifts of a and /9 to G = Aut . Note that a and /3 generate 
a group isomorphic to ZJgj f^nd G is the product of this group with the order- 
2 subgroup containing the hyperelhptic involution l. Let G GalFq/Fg be the 
g-power Frobenius, so that a"^ = la. 

Let c e _ff ^(GalFq/F^, G) be the cocycle that sends Lp to /3, and let d be the 
cocycle that sends . We claim that c and d are not cohomologous. To verify 

this, we must show that there is no 7 S G with 0^ = 7~-'^/37'^. Suppose we take an 
arbitrary 7 in G and write it as 7 = (3^ah'^. Then 7*^ = (3^aH^~^'^, so 

= a^-' Pa' v' 

ifj=0; 

ifj = l. 

Thus c and c? are not cohomologous. 

Consider the cocycles in i/^(GalFg/Fg2, G) induced from c and d; these are the 
cocycles that send ip^ to /J/S*^ = and to (/3^)(/3^)'^ = respectively. Since 
0^ = a^^/^a'^ , we see that these cocycles are cohomologous to one another. 

Next consider the cocycles in i/^(GalFq/Fg3, G) induced from c and d; these are 
the cocycles that send Lp^ to PP'^P'^^ = 1 and {I3'^){0^y {0^y^ = 1. Clearly these 
are cohomologous to one another. 

It follows that if we let G and D be the twists of X corresponding to the coho- 
mology classes of c and d, then G and D are not isomorphic to one another, but 
become isomorphic to one another over the quadratic and cubic extensions of F^. 
Furthermore, their geometric reduced automorphism groups are isomorphic to Dq. 

Example 9.4. The group Dq in characteristic 2. 

Suppose ¥q is a finite field of characteristic 2. Let a £ F^ be an element whose 
trace to F2 is 1, and let h E ¥^2 be an element with + b = a. Note that b ^ ¥q, 
because a has trace 1. 

Let X be the curve 

2 ^ 1 1 \ 

y +y^a[x + - + — — . 

The reduced automorphism group of X contains the automorphisms a{x) = x + 1 
of order 2 and /3{x) = l/(a; + 1) of order 3, and Igusa shows that the Dq generated 
by these automorphisms is the full reduced automorphism group of X. Note that 
f3 lifts to the F^-rational automorphism 

of X, but that a only lifts to the automorphisms {x,y) {x + l,y + b) and 
{x,y) 1-^ {x + l,y + b + 1), which are not defined over Fg. 

Now we are in the same group-theoretical situation as we were in Example 19.31 
and the same argument shows that we can find nonisomorphic twists G and D of 
X that become isomorphic to one another over ¥g2 and F^s . 

Example 9.5. The group D12 in characteristic greater than 5, when —3 is a square. 

Suppose ¥q has characteristic greater than 5 and suppose —3 is a square in ¥q, 
so that 9=1 mod 3. Let g be a generator for F*. An argument using Lemma l4?2l 
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shows that the two curves ^ +g and gy^ — x^+g over are not isomorphic to 
one another, but {x,y) i— s- {x,y / g^^"^) gives an isomorphism over Fg2, and {x,y) i— s- 
{g^/^/x,y/x^) gives an isomorphism over F^a. Furthermore, the two curves are 
geometrically isomorphic to the curve = x^ + 1, which in characteristic greater 
than 5 has reduced automorphism group £'12. 

Example 9.6. The group S4 in characteristic greater than 5, when —2 is not a 
square. 

Suppose ¥q has characteristic greater than 5 and suppose —2 is not a square in 
¥q. Let X be the curve 

y'^ — x^ — X 

over ¥q . Then the geometric reduced automorphism group of X is isomorphic to 6*4 . 
(Perhaps more suggestively, we can say that the geometric reduced automorphism 
group is isomorphic to the octahedral group, the octahedron in question being the 
one in Pj. whose vertices are the roots of — z in C, together with 00.) 

Let C be a primitive 8th root of unity in ¥^2 and let i — The fact that —2 
is not a square in ¥q implies that q-th power raising sends C, to either C,^ or C^. 
Then the reduced automorphism group of X, viewed as a subgroup of PGL2(Fg), 
consists of the elements 

i"z' I a e {0, 1, 2, 3}, b e {-1, 1}, z e ix, ^ 

|_ a; + 1 X + I 

Let c be the cocycle in H^{Ga\¥q/¥q, G) that sends the Frobenius ip G GalFq/I 
to the automorphism 

'x + i 2 + 2i 



a 



^x — V [x — iY 
and let d be the cocycle that sends ip to 

(ix-i 2-2i 

One can check that no matter whether (p{() is C,^ or C,"^, these two cocycles are 
not cohomologous. However, their images in H^{Ga,l¥q/¥q2, G) are cohomologous; 
indeed, if we let 7 be the automorphism 

then we have 

Also, the images of c and d in i/^(GalFg/Fg3, G) are also cohomologous, and in 
fact 

Therefore, the twists of X corresponding to c and d give us the example we want. 

Example 9.7. The group S'5 in characteristic 5, when —2 is a square. 

We are working over F^, where q is an even power of 5. Let 5 be a generator of the 
multiplicative group F*, and consider the two curves = x^ + g and gy^ = x^ + g. 
The same argument we gave in Example 19.51 shows that these two curves are not 
isomorphic to one another, but that they become isomorphic over ¥q2 and ¥q3. 
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Since they are both twists ofy^ — — x, they have geometric reduced isomorphism 
groups isomorphic to S5. 

Next we prove Theorem 19. II 

Proof of Theorem 19.11 Igusa shows that the possible reduced automorphism groups 
of genus-2 curves in characteristic 3 are the trivial group, C2, Dq, D4, 6*4, and C5. 
Theorem 11.41 shows that the only possibilities in our situation are Dq and S'4. But 
our proof of statement (a) of Theorem 19.21 shows that S'4 is not a possibility, so all 
we have to show is that Dq is also impossible. By Theorem 18.11 it will be enough 
for us to show that every curve C over a finite field ¥q of characteristic 3 whose 
reduced automorphism group is Dq has a twist that has all of its automorphisms 
defined over F,. 

So let g be a power of 3 and let C be a curve over with geometric reduced 
automorphism group Dq. From Igusa's parametrization of such curves (over F,) 
one can calculate that the Igusa invariants of such a curve are [1 : : t : t : <] for some 
nonzero t € ¥q. (Here we are using the invariants [J2 : : Jq ■ Js ■ Jio] from [llj . 
so the vector of Igusa invariants lives in weighted projective space, where the i-th 
coordinate has weight i.) In fact, we also have i 7^ — 1, because that value of t 
comes from the curve with reduced automorphism group ^4. So it will suffice for 
us to show that given any t G Fg with t ^ and i 7^ — 1, there is a curve with 
Igusa invariants [1:0 :t:t:t\ defined over ¥g with all of its automorphisms defined 
over Fg. 

Let X be the curve — {x^ — x)^ — t^/"^. One can compute that the Igusa 
invariants of X are [l:0:t:t:t]. But for every a G F3, we have automorphisms 

{x,y) i-> {±x + a,±y) 

of X, so all 12 of the automorphisms of X are defined over ¥q. □ 

We close by proving Thcorem ll.lOl 

Proof of Theorem 11.101 Let r, s, C, and D be as in the statement of Theorem ll.lOl 
From Theorem ll.4l we know that rs divides the order of the geometric automorphism 
groups of C and D, but that this group has order larger than rs. According to 
Igusa's enumeration [TTl §8] of the possible geometric reduced automorphism groups 
of genus-2 curves, we find that there are only four possible reduced automorphism 
groups to consider: 

(1) The group I?i2, which occurs in characteristic larger than 5 as the reduced 
automorphism group of the curve = x^ + 1, and which occurs in no other 
way; 

(2) The group ^4, which occurs in characteristics other than 2 and 5 as the 
reduced automorphism group of the curve y^ — x^ — 5x^ — 5x^ + 1, and 
which occurs in no other way; 

(3) The group 6*5, which occurs in characteristic 5 as the reduced automorphism 
group of the curve = x^ — x, and which occurs in no other way; and 

(4) A group of the form C| xi C5, which occurs in characteristic 2 as the reduced 
automorphism group of the curve y'^ + y = x^ , and which occurs in no other 
way. 

Note that the equations we give for these four curves show that they can be defined 
over the appropriate prime field ¥p; also the full automorphism groups of the first 
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three curves can be defined over, at worst, the quadratic extension of the ground 
field. (For the fourth curve, the full automorphism group may require a quadratic 
or a quartic extension of the ground field.) 

For any given {r, s} pair and any finite base field K, Theorem 16.11 says that 
to see whether we can find two twists of one of these four curves that satisfy the 
conclusion of Theorem 11.31 we must make simple computations in the cohomology 
sets i7^(Z, G, a^) for various values of d, where G is the automorphism group of the 
given curve and a is the automorphism of G induced by Frobenius. But we know 
what the possible groups G are, and we know what the possible Frobenius actions 
are, and we know which {r, s} pairs we have to consider, so determining whether 
any {r, s} pairs give rise to examples is a finite and well-defined computation. 

We have provided examples of similar computations in the proof of Theorem ll.81 
We leave the ones required here to the reader (and his or her favorite symbolic 
manipulation program). But we will at least note that the computation for iS'4 can 
be skipped: for this group, the only possibilities for {r, s} are {3, 4} and {3, 8}, and 
if G and D over give an example for such a pair, then G and D, when base 
extended to ¥^2 or Fq4, given an example with {r, s} = {2, 3} over a field of square 
order. However, Theorem 11.81 shows that no such examples exist. 

The result of the computation that we have outlined above is that the only 
reduced automorphism group that gives rise to an example is the group 6*5, with 
the nontrivial action of Frobenius, and with {r, s} = {2,5}. Furthermore, there is 
a unique pair of elements of i7^(Z, G, a) that gives rise to an example: identifying 
G with the automorphism group oi = — x, the pair corresponds to the classes 
in i/^(Z, G, a) of the automorphisms {x, y) t-^ {x + 1, y) and (a;, y) t-^ {x + 2, y). 

Since the action of Frobenius on the automorphism group is nontrivial, the ex- 
amples occur only over fields of the form K — ¥q where q is an odd power of 5. 
Let a be the g-power Frobenius of K. The first of the cohomology classes identified 
above corresponds to the twists of = x^ — x of the form y^ = x^ — x + a, where 
a e K has the property that b'^ - b = ±1 for all b G K with b^ — b = a. The 
second cohomology class corresponds to the twists of the form ~ x'^ — x + a, 
where a € K has the property that b"^ — b ^ ±2 for all b G K with b^ — b — a. 
Thus, we can always put the twists G and D in the form given in the statement of 
the theorem, and any two curves as in the statement of the theorem are twists of 
y'^ = x^ — X with minimal isomorphism extensions of degrees 2 and 5 over K . □ 

10. Galois cohomology of connected algebraic groups 

Suppose G and D are two curves over a field K. Let X be the algebraic variety 
Isom(G, £)), and let L and M be finite extensions of K whose degrees over K are 
coprime to one another. Question [TTT] can be phrased in terms of X: 

Question 10.1. Suppose X{L) andX{M) are nonempty. MustX{K) be nonempty? 

Note that the hypothesis that X{L) is nonempty shows that the variety X is a 
torsor for the algebraic group Aut G. 

Several authors have considered Question 110.11 in the case where X is a torsor 
for a connected linear algebraic group (see [22] and the references therein). Totaro 
considers a more general version of the question, which he phrases as an assertion: 
Let k he a field, let G be a smooth connected linear algebraic 
group over k, and let X be a quasi-projective variety that is a 
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homogeneous space for G. Suppose that there is a zero-cycle (not 
necessarily effective) of degree d > on X. Then X has a closed 
point of degree dividing d, which moreover can be chosen to be 
etale (i.e. separable) over k. [22, Question 0.2] 

Totaro points out that the question has a positive answer in the special case 
d = I for torsors over any split simple group other than Eg, by work of Bayer- 
Fluckiger and Lenstra [2] and Gille [6]; Garibaldi and Hoffmann [4] proved that 
the answer is again positive for torsors over several other groups, including some 
non-split ones. The answer for Es is not known. Florence [3] and Parimala [15] 
have shown that the answer can be 'no' if X is not a G-torsor. 

Serre makes the following remark: 

Soit G un groupe algebrique sur fc, et soient x, y deux elements de 
H^{k, G). Supposons que x et y aient meme images dans H^{k' , G) 
et dans H^{k" , G) oh k' et k" sont deux extensions finics de k de 
degres premiers entre eux (par exemple [k' : fc] = 2 et [k" : k] =3). 
Ceci n'entraine pas x = y contrairement a ce qui se passe dans le 
cas abelien ; on pent en construire des exemples, en prenant G non 
connexe ; j 'ignore ce qu'il en est lorsque G est connexe. [HI p. 117] 

[Let G be an algebraic group over fc, and let x and y be two ele- 
ments of H^{k,G). Suppose that x and y have the same images 
in H^{k',G) and in H^{k",G), where fc' and fc" are finite exten- 
sions of fc whose degrees are coprime to one another (for example, 
[fc':fc] = 2 and [fc" : fc] = 3). It does not follow that x = y, a.s 
opposed to what happens in the abelian case; one can construct 
examples by taking G to be not connected; I do not know what 
happens when G is connected.] 

Suppose the group G in Serre's remark is a connected linear group, and let A 
and B denote the twists of G corresponding to x and y. Let X = Isom(^, S), so 
that X is a G-torsor. Since x and y have the same images in H^(k',G) and in 
H^{k",G), the variety X has rational points over fc' and fc", so it has fc-rational 
zero-cycles of degrees [fc' : fc] and [fc" : fc] . Since these field degrees are coprime to 
one another, X has a zero-cycle of degree 1. Thus, in this case, Totaro's question 
("Does X have a rational point?") is equivalent to Serre's implied question ("Does 
x^yr). 

As Serre mentions, examples can be constructed when G is not connected. In 
this paper we considered the case of the algebraic group G — Aut G for a curve G; 
when G has genus at least 1, this group is not connected when it is nontrivial. 
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